Red Hat Enterprise Linux 6/gnupg2

Red Hat · Package

17 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
gnupg2: gnupg2: Arbitrary code execution via insecure directory permissionsCVE-2026-118131	Red Hat Enterprise Linux 10/gnupg2 Red Hat Enterprise Linux 6/gnupg2	Red Hat	High	No fix reported	Not recorded
gnupg: infinite loop when decompressing data packetsCVE-2014-4617	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Medium	No fix reported	Not recorded
gnupg2: memcpy with overlapping ranges (keybox_search.c)CVE-2015-1607	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Low	No fix reported	Not recorded
gnupg2: invalid memory read using a garbled keyringCVE-2015-1606	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Low	No fix reported	Not recorded
libgcrypt: last-level cache side-channel attackCVE-2015-0837	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Low	No fix reported	Not recorded
libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)CVE-2014-3591	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Low	No fix reported	Not recorded
GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeysCVE-2018-9234	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Low	No fix reported	Not recorded
GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoSCVE-2019-13050	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Medium	No fix reported	Not recorded
gpg: Signature spoofing via status line injectionCVE-2022-34903	Red Hat Enterprise Linux 6/gnupg2 Red Hat Enterprise Linux 7/gnupg2	Red Hat	Medium	No fix reported	Not recorded
gnupg: denial of service issue (resource consumption) using compressed packetsCVE-2022-3219	Red Hat Enterprise Linux 6/gnupg2 Red Hat Enterprise Linux 7/gnupg2	Red Hat	Low	No fix reported	Not recorded
gnupg: verification DoS due to a malicious subkey in the keyringCVE-2025-30258	Red Hat Enterprise Linux 10/gnupg2 Red Hat Enterprise Linux 6/gnupg2	Red Hat	Low	No fix reported	Not recorded
gnupg: GnuPG: Signature bypass via form feed character in signed messagesCVE-2025-68972	Red Hat Enterprise Linux 10/gnupg2 Red Hat Enterprise Linux 6/gnupg2	Red Hat	Medium	No fix reported	Not recorded
GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds writeCVE-2025-68973	Red Hat Enterprise Linux 6/gnupg2	Red Hat	High	No fix reported	Not recorded
GnuPG: GnuPG: Remote code execution and denial of service via crafted CMS EnvelopedData messageCVE-2026-24881	Red Hat Enterprise Linux 6/gnupg2	Red Hat	High	No fix reported	Not recorded
GnuPG: GnuPG: Denial of service due to specially crafted signature packetCVE-2026-24883	Red Hat Enterprise Linux 10/gnupg2 Red Hat Enterprise Linux 6/gnupg2	Red Hat	Low	No fix reported	Not recorded
GnuPG: Incorrect cryptographic message parsingCVE-2026-57062	Red Hat Enterprise Linux 10/gnupg2 Red Hat Enterprise Linux 6/gnupg2	Red Hat	Low	No fix reported	Not recorded
gnupg2: gnupg: Arbitrary file overwrite via symlink traversal in gpgtarCVE-2026-105712	Red Hat Enterprise Linux 6/gnupg2 Red Hat Enterprise Linux 7/gnupg2	Red Hat	Low	No fix reported	Not recorded